• GitHub
  • Slack
  • Linkerd Forum

install-cni

Output Kubernetes configs to install Linkerd CNI.

This command installs a DaemonSet into the Linkerd control plane. The DaemonSet copies the necessary linkerd-cni plugin binaries and configs onto the host. It assumes that the ’linkerd install’ command will be executed with the ‘–linkerd-cni-enabled’ flag. This command needs to be executed before the ’linkerd install –linkerd-cni-enabled’ command.

The installation can be configured by using the –set, –values, –set-string and –set-file flags. A full list of configurable values can be found at https://artifacthub.io/packages/helm/linkerd2/linkerd2-cni#values

Flags

FlagUsage
--admin-portProxy port to serve metrics on
--cni-imageImage for the cni-plugin
--cni-image-versionImage Version for the cni-plugin
--cni-log-levelLog level for the cni-plugin
--control-portProxy port to use for control
--dest-cni-bin-dirDirectory on the host where the CNI binary will be placed
--dest-cni-net-dirDirectory on the host where the CNI configuration will be placed
--inbound-portProxy port to use for inbound traffic
--linkerd-version
-v
Tag to be used for Linkerd images
--outbound-portProxy port to use for outbound traffic
--priority-class-namePod priorityClassName for CNI daemonset’s pods
--proxy-uidRun the proxy under this user ID
--redirect-portsPorts to redirect to proxy, if no port is specified then ALL ports are redirected
--registryDocker registry to pull images from ($LINKERD_DOCKER_REGISTRY)
--setset values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
--set-fileset values from respective files specified via the command line (can specify multiple or separate values with commas: key1=path1,key2=path2)
--set-stringset STRING values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
--skip-inbound-portsPorts and/or port ranges (inclusive) that should skip the proxy and send directly to the application
--skip-outbound-portsOutbound ports and/or port ranges (inclusive) that should skip the proxy
--use-wait-flagConfigures the CNI plugin to use the “-w” flag for the iptables command. (default false)
--values
-f
specify values in a YAML file or a URL (can specify multiple)